Formal Verification of Authorization Policies for Enterprise Social Networks using PlusCal-2

Sabina Aktar (1) , Ehtesham Zahoor (2) , Olivier Perrin (3)

1 Bahria University
2 NUCES - National University of Computer and Emerging Sciences [Islamabad]
3 COAST - Web Scale Trustworthy Collaborative Service Systems

Information security research has been a highly active and widely studied research direction. In the domain of of Enterprise Social Networks (ESNs), the security challenges are amplified as they aim to incorporate the social technologies in an enterprise setup and thus asserting greater control on information security. Further, the security challenges may not be limited to the boundaries of a single enterprise and need to be catered for a federated environment where users from different ESNs can collaborate. In this paper, we address the problem of federated authorization for the ESNs and present an approach for combining user level policies with the enterprise policies. We present the formal verification technique for ESNs and how it can be used to identify the conflicts in the policies. It allows us to bridge the gap between user-centric or enterprise-centric approaches as required by the domain of ESN. We apply our specification of ESNs on a scenario and discuss the model checking results.

Mots clés: Enterprise Social Network; Formal Verification; Model checking; PlusCal-2; TLA +; tlc

Domaines: Base de données [cs.DB]; Génie logiciel [cs.SE]

Sabina Aktar, Ehtesham Zahoor, Olivier Perrin. Formal Verification of Authorization Policies for Enterprise Social Networks using PlusCal-2. CollaborateCom 2017 - 13th EAI International Conference on Collaborative Computing: Networking, Applications and Worksharing, Dec 2017, Edimburg, United Kingdom. pp.1-10. ⟨hal-01657116⟩